=====================================================================

                           CERT-Renater

               Note d'Information No. 2014/VULN037
_____________________________________________________________________

DATE                : 04/02/2014

HARDWARE PLATFORM(S): /

OPERATING SYSTEM(S): Systems running Apache Tomcat versions
                           prior to 6.0.39.

======================================================================
http://mail-archives.apache.org/mod_mbox/tomcat-announce/201402.mbox/%3C52EF6CD2.8090301@apache.org%3E
______________________________________________________________________

The Apache Tomcat team announces the immediate availability of Apache
Tomcat 6.0.39 stable.

Apache Tomcat 6.0.39 is primarily a security and bug fix release. The
notable changes include:
- Various improvements to XML configuration file validation.
- Better adherence to RFC2616 for Content-Type and Content-Length
  headers.
- Avoid CVE-2013-1571 when generating Javadoc.

Please refer to the change log for the list of changes:
http://tomcat.apache.org/tomcat-6.0-doc/changelog.html

Note that is version has 4 zip binaries: a generic one and three
bundled with Tomcat native binaries for different CPU architectures.

Downloads:
http://tomcat.apache.org/download-60.cgi

Migration guide from earlier releases:
http://tomcat.apache.org/migration.html

Thank you,

-- The Apache Tomcat Team

=========================================================
Serveur de référence du CERT-Renater
https://services.renater.fr/ssi/
==========================================================
+ CERT-RENATER          | tel : 01-53-94-20-44           +
+ 23 - 25 Rue Daviel    | fax : 01-53-94-20-41           +
+ 75013 Paris           | email: cert@support.renater.fr +
==========================================================